CVE-2025-22088
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
In the Linux kernel, the RDMA/erdma driver's erdma_accept_newconn() function calls erdma_cep_put() on the new_cep structure and then continues to use it, leading to a use-after-free (UAF) vulnerability.
Risk Assessment
An attacker could exploit this to achieve remote code execution in kernel context or cause a system crash by manipulating RDMA connections.
Recommendation
Apply the Linux kernel patch for CVE-2025-22088 that moves the dereference of new_cep before the erdma_cep_put() call.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.